Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
1 selected

2 records

Vendor: Find And Replace All Project Clear all filters
TI-2022-02134 CVE-2022-2311 · GHSA-vmxx-9r5c-688g

Find and Replace All < 1.3 - Reflected Cross Site Scripting

Priority MEDIUM 60

The Find and Replace All WordPress plugin before 1.3 does not sanitize and escape some parameters from its setting page before outputting them back to the user, leading to a Reflected Cross-Site Scripting issue.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00529 Published 2022-11-28 Fixed in 1.3
TI-2022-03530 CVE-2022-3850 · GHSA-2qpw-jpx2-w9hr

Find and Replace All <= 1.3 - Arbitrary Replacement via CSRF

Priority MEDIUM 53

The Find and Replace All WordPress plugin before 1.3 does not have CSRF check when replacing string, which could allow attackers to make a logged admin replace arbitrary string in database tables via a CSRF attack

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.0029 Published 2022-11-28 Fixed in 1.3